FTC Act: Federal Trade Commission Act, particularly Section 5 which governs unfair or deceptive practices and includes FTC's privacy and security guidelines
HIPAA: Health Insurance Portability and Accountability Act - Federal law that protects sensitive patient health information from being disclosed without consent
GLBA: Gramm-Leach-Bliley Act - Requires financial institutions to explain their information-sharing practices and protect sensitive data
COPPA: Children's Online Privacy Protection Act - Federal law that imposes requirements on operators of websites or online services directed to children under 13 years of age
FERPA: Family Educational Rights and Privacy Act - Federal law that protects the privacy of student education records
CCPA/CPRA: California Consumer Privacy Act and California Privacy Rights Act - Comprehensive state privacy laws that give California residents various rights over their personal information
VCDPA: Virginia Consumer Data Protection Act - Comprehensive privacy law providing Virginia residents with rights over their personal data
CPA: Colorado Privacy Act - State law providing Colorado residents with various privacy rights and imposing obligations on businesses
UCPA: Utah Consumer Privacy Act - Privacy law providing Utah residents with rights over their personal data
CTDPA: Connecticut Data Privacy Act - Comprehensive privacy law protecting Connecticut residents' personal information
GDPR: EU General Data Protection Regulation - Comprehensive privacy law that may apply to US organizations handling EU residents' data, specifically Article 35 addressing DPIAs
PIPEDA: Personal Information Protection and Electronic Documents Act - Canadian federal privacy law that may affect US organizations handling Canadian personal information
LGPD: Brazilian General Data Protection Law - Brazil's comprehensive privacy law that may affect US organizations handling Brazilian personal data
PCI DSS: Payment Card Industry Data Security Standard - Security standard for organizations that handle branded credit cards from major card schemes
NIST: National Institute of Standards and Technology frameworks - Guidelines and standards for data security and privacy
ISO 27001: International standard for information security management systems, providing framework for policies and procedures including security controls
